CVE Feed

    Dashboard / CVE / CVE-2024-48700

    CVE-2024-48700

    Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.

    Published:Oct 25, 2024
    Last Modified:Jun 17, 2025
    EPS:Oct 25, 2024
    EPSS Score:0.00465
    CVSS Score:7.2

    Affected Products

    Vendor
    Kliqqi
    Product
    Kliqqi Cms

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42619 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain…
    CVE-2024-31673 (CVSS 9.8) — Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.…
    CVE-2020-21119 (CVSS 9.8) — SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue para…
    CVE-2020-21121 (CVSS 9.8) — Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admi…
    CVE-2016-10756 (CVSS 8.8) — Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used t…
    CVE-2018-11405 (CVSS 8.8) — Kliqqi 2.0.2 has CSRF in admin/admin_users.php.…
    CVE-2017-17889 (CVSS 5.4) — Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile,…
    CVE-2017-17902 (CVSS 9.8) — SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High